General
-
Target
9a1d5f6a7b9a947d390e1bf88bd799882456abbdf31dd66b09136b060fe53caf.exe
-
Size
707KB
-
MD5
ca456ec4904b797cbae50490d92bf64a
-
SHA1
ab80469ca3d7f534a93cf9622059bb9e7a86b30c
-
SHA256
9a1d5f6a7b9a947d390e1bf88bd799882456abbdf31dd66b09136b060fe53caf
-
SHA512
b9ef664f005f5b678e006c80bdcd1d873a0e095a4fd9b91ada80ae1408f61f07617983f826a0c698674697d18ee3a1a9c55c35e698913da6b61f51c0ffb6af4a
-
SSDEEP
6144:wcmwdMZ0aq9arLKkdMqJ+VYg/5ICAAQs+d5zSTamgEoOFzxLza158bvnh:6uaTmkZJ+naie5OTamgEoKxLW0Lh
Score
10/10
Malware Config
Signatures
-
Detects command variations typically used by ransomware 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables containing commands for clearing Windows Event Logs 1 IoCs
-
Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9a1d5f6a7b9a947d390e1bf88bd799882456abbdf31dd66b09136b060fe53caf.exe
2f7da257a3159bdb9faeb823ef872a56
Headers
Imports
Sections